National CIRT - Montenegro “Regional Development Forum” Bucharest, April 2015 Ministry for Information Society and Telecommunications

CIRT ESTABLISHMENT Key Organizations in CIRT Montenegro establishment: Government of Montenegro – Ministry for Information Society and Telecommunications ITU – International Telecommunication Union IMPACT – International Multilateral Partnership Against Cyber Threats Signing of the Administrative Agreement between Government of Montenegro and ITU, July 2011

CIRT-ME Services Incident Handling, Response and Coordination Security Advisories Awareness, Training & Education CIRT-ME Constituency State authorities Government authorities Local authorities.me domain Montenegro IP address range

Roles and Responsibilities National CIRTs can Drive & Promote National Cybersecurity Strategies / Policies Cyber Forensics Services National Public Key Infrastructure (PKI) / Digital Signature Governance / Legislations Critical Information Infrastructure Protection Cybersecurity Awareness Training & Education Cybersecurity Research International Cooperation Security Assurance

Legal Framework Law on Information Security (currently working on amendments) Administrative Agreement between Government of Montenegro and ITU, Readiness Assessment Report, National CIRT Project Documentation, User Requirement Specification CIRT Policies Detailed study on Government Agencies roles against cyber crime Cyber Security Strategy Methodology for Critical Information Infrastructure

Training & Education ITU supported trainings: 1.“Developing and Implementing a CIRT Team” in Malaysia, 2.IMPACT experts held Incident Response training in Montenegro for 12 representatives from different Government Agencies, 3.EC-Council (CEH) vouchers for CIRT members, 4.Regional Forum on Cybersecurity for Europe (Bulgaria), including Cyberdrill 5.Bringing Cyberdrill to Montegro (Infofest 2015)

Implementation -Implementation stage started in February Publishing of website and RTIR ticketing system, April 2012www.cirt.me

National CIRT Positioning

Cooperation with Government Agencies National CIRT started the process of establishing local CIRT teams in Montenegro. National CIRT will develop special relations with key Government Institutions recognized in the cyber security field: Ministry of Defense, Ministry of Internal Affairs, Ministry of Justice, National Security Agency Directorate for the Protection of Classified Information etc

Cooperation with Private Sector In order for the CIRT to fulfill it’s duties, it’s very important to develop and maintain good relations with the Private sector. Key Institutions: ISP, Mobile Operators, Banking Sector, Electric Power Industry, Montenegro Post office Other institutions

International Cooperation Some of the key international organizations which are relevant in the cyber security field: ITU IMPACT ENISA TRUSTED Introducer FIRST CERT/CIRT Netwotk

Redesigned CIRT-ME Website -Published in December 2014

Child Online Protection

COP Awareness raising campaign: “Conquer Internet, Surf Wisely” Unique project on the topic of safe Internet aims to provide training and skills to Montenegrin children, their parents and teachers so that Internet becomes positive experience for them while strengthening the sense of security in the digital environment.

Thank you for your attention!